Over 575 malicious OpenClaw skills delivered malware to Windows and macOS

Researchers have identified more than 575 malicious OpenClaw skills posing as utilities, according to Acronis TRU Cyber Pulse 2026 reporting. The packages delivered trojans, cryptocurrency miners and information stealers to Windows and macOS systems, exploiting the fact that agent skills can combine instructions with executable code that runs with permissions already granted to the agent.